Overview

overview

10

Static

static

eac9ca65e2...08.exe

windows7-x64

10

eac9ca65e2...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac9ca65e2e14b156bb25a27fff5bc71495063bc83cd500c44ad01420d841508

  • Size

    47KB

  • Sample

    221106-mqjj4sgab2

  • MD5

    302bba6c2517bc3088a2a0cd69d342d9

  • SHA1

    f4592f45898fc7153b63a36b5b4ef30188d8a634

  • SHA256

    eac9ca65e2e14b156bb25a27fff5bc71495063bc83cd500c44ad01420d841508

  • SHA512

    57e06c884e2c311c65d308b9ffc293b4b8a69491d56f3fbca5cbbb64c65bdc1bb135c30cc4f95027146508275a5d47b4a08b7d25fd9104e014fd53a1baf58184

  • SSDEEP

    768:H02/jcSqLT4T57k16VUjofRwv0O90xi1yYnIrv35BMC:3Q5L87k1RofRDkNI75

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eac9ca65e2e14b156bb25a27fff5bc71495063bc83cd500c44ad01420d841508

    • Size

      47KB

    • MD5

      302bba6c2517bc3088a2a0cd69d342d9

    • SHA1

      f4592f45898fc7153b63a36b5b4ef30188d8a634

    • SHA256

      eac9ca65e2e14b156bb25a27fff5bc71495063bc83cd500c44ad01420d841508

    • SHA512

      57e06c884e2c311c65d308b9ffc293b4b8a69491d56f3fbca5cbbb64c65bdc1bb135c30cc4f95027146508275a5d47b4a08b7d25fd9104e014fd53a1baf58184

    • SSDEEP

      768:H02/jcSqLT4T57k16VUjofRwv0O90xi1yYnIrv35BMC:3Q5L87k1RofRDkNI75

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks